US 12,086,233 B2
Lifecycle management of secrets on serverless platform
Bhaskardeep Khaund, Bothell, WA (US); Bo Wu, Jiangsu (CN); Yiqun Wang, Suzhou (CN); and Chen Shen, Suzhou (CN)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Appl. No. 17/608,024
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
PCT Filed Jun. 26, 2019, PCT No. PCT/CN2019/093122
§ 371(c)(1), (2) Date Nov. 1, 2021,
PCT Pub. No. WO2020/258105, PCT Pub. Date Dec. 30, 2020.
Prior Publication US 2022/0318370 A1, Oct. 6, 2022
Int. Cl. G06F 21/46 (2013.01)
CPC G06F 21/46 (2013.01) 20 Claims
OG exemplary drawing
 
1. A computing system, comprising:
a management system that includes a plurality of different secret type-specific systems corresponding to a plurality of different types of secrets, wherein
each secret type-specific system, of the plurality of different secret type-specific systems, is specific to a corresponding type of secret of the plurality of different types of secrets and configured to perform a different replacement process to replace a secret of a corresponding type of secret, that is used by a dependent system, with a new secret of the corresponding type of secret, and
the management system includes control functionality configured to isolate execution of each replacement process of the plurality of different secret type-specific systems;
at least one processor; and
memory storing instructions executable by the at least one processor to provide an orchestration engine configured to:
identify a secret, of a given type, to be replaced;
call a particular secret type-specific system, of the plurality of different secret type-specific systems, based on the given type to be replaced, wherein the particular secret type-specific systems performs a replacement process to replace the secret of the given type with a new secret of the given type; and
store the new secret in a secrets data store for use by the dependent system.